283c3d2bc726a485ca0ef5497aa89ce7f8d95a12422f80512eb482ba7c6599db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

283c3d2bc726a485ca0ef5497aa89ce7f8d95a12422f80512eb482ba7c6599db.elf
Size

100KB
Sample

240818-bf3pfsxapf
MD5

35dbec1ac3597442072369a00a7f3813
SHA1

c3608df747d6f91af548ca0d528b1d2ca30e7d9f
SHA256

283c3d2bc726a485ca0ef5497aa89ce7f8d95a12422f80512eb482ba7c6599db
SHA512

8d3cb0ef2c3835309ea85874956e385295ded053251bea318eaced7d243e35773522039263e53925e420f246b561ed2320a84352785b9f8e27ecc2a81c5cc064
SSDEEP

3072:oSKYgHDBu6IfTpvohsoC4VMsVLyvywLOm/P8Qx8AY46gp:oGoh9CkMsVLcOm/P8Qx8AY46gp

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  283c3d2bc726a485ca0ef5497aa89ce7f8d95a12422f80512eb482ba7c6599db.elf
- Size
  
  100KB
- MD5
  
  35dbec1ac3597442072369a00a7f3813
- SHA1
  
  c3608df747d6f91af548ca0d528b1d2ca30e7d9f
- SHA256
  
  283c3d2bc726a485ca0ef5497aa89ce7f8d95a12422f80512eb482ba7c6599db
- SHA512
  
  8d3cb0ef2c3835309ea85874956e385295ded053251bea318eaced7d243e35773522039263e53925e420f246b561ed2320a84352785b9f8e27ecc2a81c5cc064
- SSDEEP
  
  3072:oSKYgHDBu6IfTpvohsoC4VMsVLyvywLOm/P8Qx8AY46gp:oGoh9CkMsVLcOm/P8Qx8AY46gp
Score

7^/10

persistence
- Renames itself
- Creates/modifies Cron job
  Cron allows running tasks on a schedule, and is commonly used for malware persistence.
  persistence
- Enumerates running processes
  Discovers information about currently running processes on the system
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1